Crypto Exchange Licensing 101: Registration, License, Trust Charter

Three words that get deliberately blurred

Exchange marketing pages love the word "regulated." We read those pages for a living, and the word covers three very different things. A registration is usually an AML filing: the state knows you exist and expects reports. A license involves vetting, conditions and supervision. A trust charter or bank-style authorization adds fiduciary duties and capital requirements.

The gap between these tiers is enormous. FinCEN registration in the US takes a form. A NYDFS trust charter takes years and puts examiners inside your business. Both let a marketing team write "regulated in the USA." Our regulation subscore exists to price that difference.

What a registration actually is

AML registrations, like AUSTRAC in Australia, FinCEN in the US or FCA crypto registration in the UK, obligate the exchange to identify customers, monitor transactions and report suspicious activity. They protect the financial system from criminals. They are not designed to protect you from the exchange.

No registration regime checks whether client assets are segregated, whether the order book is honest, or whether the company can survive a bad month. When an exchange's only credential is a list of AML registrations, we score it accordingly.

What a real license adds

Proper licensing regimes, like MiCA authorization in the EU, Canada's restricted-dealer registration or state money-transmitter licenses, impose conditions: minimum capital, custody standards, complaint handling, audits, and a supervisor with the power to inspect and revoke. The exchange accepts jurisdiction, which means courts you can actually reach.

The strongest tier is fiduciary. Gemini's New York trust charter, which anchors its 9.5 regulation subscore in our model, obliges it to hold customer assets as a fiduciary under bank-style supervision. Bitpanda's MiCA license, behind its 9.2, gives it passportable, supervised status across the EU with the deepest European rails in our dataset.

The offshore entity trick

Now the other half of the industry. A large share of global volume runs through entities incorporated in the Seychelles, the British Virgin Islands or similar jurisdictions. These are real companies in the legal sense, but the local regulator neither supervises crypto exchange conduct meaningfully nor offers you any recourse.

The pattern to watch is the corporate split: a licensed entity in one or two showcase jurisdictions, while your actual customer agreement is with the Seychelles company. Read the terms of service and find the counterparty name. That name, not the press release, is who owes you your coins. This structure is a core reason venues like LBank at 4.2, CoinW at 4.3 and CoinEx at 4.4 sit at the bottom of our regulation subscore.

What a license protects you from, and what it cannot

A serious license protects you from the mundane failure modes: commingled funds, vanished management, no complaint route, insolvency with no records. It gives a supervisor leverage before a collapse and gives you a legal venue after one. Those are real, valuable protections.

It does not protect you from market risk, from your own leverage, from a hack that exceeds insurance, or from a token going to zero. FTX taught a related lesson: a flashy license portfolio means little if the core entity holding your assets is the unregulated one. Licensing is one input. We weigh it at 18% in our base model, and about 28% on regulated and safest pages, alongside security, reserves and transparency.

FAQ